Skip to main content

Northstar Controller CVE-2017-2322

MEDIUM
Uncontrolled Resource Consumption (CWE-400)
2017-04-24 sirt@juniper.net
5.5
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Apr 24, 2017 - 18:59 cve.org
MEDIUM 5.5

DescriptionCVE.org

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1, may allow an authenticated user to cause widespread denials of service to system services by consuming TCP and UDP ports which are normally reserved for other system services.

AnalysisAI

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1, may allow an authenticated user to cause widespread denials of service to. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Uncontrolled Resource Consumption (CWE-400), which allows attackers to cause denial of service by exhausting system resources. A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1, may allow an authenticated user to cause widespread denials of service to system services by consuming TCP and UDP ports which are normally reserved for other system services. Affected products include: Juniper Northstar Controller. Version information: version 2.1.0.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement rate limiting, set resource quotas, validate input sizes, use timeouts.

CVE-2017-2320 CRITICAL
10.0 Apr 24

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an

CVE-2017-2332 HIGH
8.8 Apr 24

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0

CVE-2017-2321 HIGH
8.6 Apr 24

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an

CVE-2017-2317 HIGH
8.6 Apr 24

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pa

CVE-2017-2319 HIGH
8.3 Apr 24

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a m

CVE-2017-2323 HIGH
7.5 Apr 24

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pa

CVE-2017-2334 HIGH
7.5 Apr 24

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pa

CVE-2017-2331 HIGH
7.3 Apr 24

A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack

CVE-2017-2325 MEDIUM
6.5 Apr 24

A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack

CVE-2017-2333 MEDIUM
6.5 Apr 24

A persistent denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0

CVE-2017-2318 MEDIUM
6.5 Apr 24

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an

CVE-2017-2326 MEDIUM
6.5 Apr 24

An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Serv

Share

CVE-2017-2322 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy